[jboss-dev-forums] [Design of Security on JBoss] - Re: Security Injection in AS5

[adrian@jboss.org]

I've closed JBDEPLOY-32.

* Even if I hacked the deployers such that some parsing deployers ran before/after
the construction of the classloader 
(assuming I know which those should be - which I don't)

* I hacked those parsing deployers that ran after the classloader deployer
to run with deployment classloader

* We fixed JBossXB to support it

Its simply not correct.

You should NOT be mixing runtime and metadata models in this way.

There are many reasons why you should not mix.

The most obvious is programmatic deployment where I don't want to include
random implementation jars in a client just to create some metadata to deploy
a security domain.

Seperate the deployment model from the runtime and place it in deployers.

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4142344#4142344

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4142344